CVE-2021-32028CWE-200

A flaw was found in postgresql

published October 11, 2021

CVSS
—
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01558 · 75.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-10-11T00:00Z
EPSS history
Timeline
  • 11 OCT 00:00Z
    A flaw was found in postgresql
    cvelistv5